CVE-2021-46006
30.03.2022, 23:15
In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication.Enginsight
| Vendor | Product | Version |
|---|---|---|
| totolink | a3100r_firmware | 5.9c.4577:c.4577 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration